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VPN CONnGURATION DATABASE 



ENDPOINTS TABLE 

LIST OF CONFIGURED TUNNELS 
LOCAL-REMOTE PAIR DATA 
IDENTIFIER FOR EACH MACHINE 
IP ADDRESSES 
CRL CHECKING FLAG 
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PRE-SHARED KEYS TABLE 

LIST OF COMMON (SHARED) 
KEY FOR EACH TUNNEL PAIR 
USING PRE-SHARED KEY 
SECURITY METHOD 
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POUCY TABLE 

■ TYPICALLY ONE POLICY PER 
VIRTUAL PRIVATE NETWORK 

■ INCLUDES AVAILABLE SECURE 
ACCESS METHODS 

■ PREFERENCE ORDER FOR 
MULTIPLE ACCESS METHODS 
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DIGITAL CERTIFICATE TABLE 

UST OF CERTIFICATES (PUBLIC 
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SIGNING CERTIFICATE KEYS 
USED FOR CERTIFICATE 
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SEND AND RECEIVE PROTECTED DATA 


SEND AND RECEIVE PROTECTED DATA 


USING POLICIES AND PROFILES 
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ESTABLISH A STANDARD FORMAT 
AS A DTD FILE FOR SPECIFYING 
IP SECURITY TUNNELS 



INCLUDE A ROOT ELEMENT 
IN THE STANDARD 



INCLUDE A PROTECTION 
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OF IKE TRANSFORMS 
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GENERATE AN XML FILE 
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TO PROPERLY CONFIGURE 
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